Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
File: 0BA74CC46EF111EEB2AAC928C4F9AE02.roa (raw, json)
Hash identifier: clpG5lxa+lRCUJ36rPFOA52Dk66cnDXcCBDcUcl1PLU=
Subject key identifier: AF:00:41:46:22:91:E3:9E:3E:E8:50:DB:B8:4A:D6:18:2E:D8:FB:54
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4E0B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:57:07 +0000
ROA not before: Thu 28 Aug 2025 14:57:07 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38733
IP address blocks: 42.96.33.0/24 maxlen: 24
42.96.36.0/23 maxlen: 24
42.96.62.0/24 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.244.0/24 maxlen: 24
103.82.32.0/22 maxlen: 24
103.117.196.0/23 maxlen: 23
103.188.20.0/23 maxlen: 23
103.190.38.0/23 maxlen: 24
115.165.161.0/24 maxlen: 24
115.165.162.0/23 maxlen: 24
115.165.164.0/23 maxlen: 24
115.165.167.0/24 maxlen: 24
119.82.133.0/24 maxlen: 24
124.158.8.0/21 maxlen: 24
124.158.8.0/24 maxlen: 24
124.158.9.0/24 maxlen: 24
124.158.10.0/24 maxlen: 24
124.158.11.0/24 maxlen: 24
124.158.12.0/24 maxlen: 24
124.158.13.0/24 maxlen: 24
124.158.15.0/24 maxlen: 24
203.167.12.0/22 maxlen: 24
203.205.15.0/24 maxlen: 24
2400:8c60::/48 maxlen: 48
2402:5300:4020::/48 maxlen: 48
2402:5300:4021::/48 maxlen: 48
2402:5300:4e00::/40 maxlen: 48
2402:5300:7100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19979 (0x4e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:57:07 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06e43-0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:29:e8:d9:50:99:eb:44:1e:93:ab:46:e0:
b8:a1:56:ee:6e:bd:d4:50:0b:45:8c:5d:10:9a:91:
94:cd:80:3e:68:5b:29:2f:73:09:76:25:c6:38:7d:
d7:26:d0:8b:53:72:34:f0:89:1a:16:b1:b4:41:9a:
d0:67:59:91:65:3c:12:2d:b3:8b:3a:05:05:f4:0d:
f8:e3:07:d0:e7:6c:91:fd:61:db:cb:ab:7a:bd:a9:
6b:72:e3:83:21:35:bc:0c:dc:33:a1:6a:16:1a:75:
19:b1:66:9d:63:c5:12:82:11:42:34:39:33:28:c2:
9f:37:0d:ab:8b:07:3c:d3:af:49:66:37:63:fb:ac:
79:bd:b6:a6:bf:47:45:06:20:51:e6:16:bc:87:cc:
c2:2d:5a:3b:e8:cc:f3:8c:4a:36:98:cd:11:3b:42:
94:04:ae:4e:1d:8f:0d:60:c3:87:94:fe:9f:97:cd:
6d:af:45:5f:cb:7b:ba:08:62:c4:57:f4:b2:9e:75:
2a:3f:ba:f2:b3:ee:6f:7b:8c:36:77:0b:4c:f9:35:
ad:cb:b6:b8:5d:92:84:77:ae:af:37:ac:79:c6:45:
8e:c4:59:d5:66:cd:c7:a5:61:8b:0b:b9:c9:1c:ae:
dd:7b:ae:69:14:d6:86:e1:59:ae:d5:c7:b9:2a:2e:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:41:46:22:91:E3:9E:3E:E8:50:DB:B8:4A:D6:18:2E:D8:FB:54
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.33.0/24
42.96.36.0/23
42.96.62.0/23
45.122.244.0/24
103.82.32.0/22
103.117.196.0/23
103.188.20.0/23
103.190.38.0/23
115.165.161.0-115.165.165.255
115.165.167.0/24
119.82.133.0/24
124.158.8.0/21
203.167.12.0/22
203.205.15.0/24
IPv6:
2400:8c60::/48
2402:5300:4020::/47
2402:5300:4e00::/40
2402:5300:7100::/40
Signature Algorithm: sha256WithRSAEncryption
6c:4c:33:41:26:c6:8e:cd:cd:14:f9:6e:4e:58:82:ed:19:2e:
60:36:9b:ab:57:ad:4b:e1:d8:42:09:e7:66:a4:00:2e:d5:6a:
21:6b:ce:93:84:cb:39:3a:16:e2:f4:29:65:10:c2:1a:09:27:
28:06:59:f9:f6:e0:58:d8:4d:25:56:40:48:e1:df:81:44:1c:
30:86:38:06:56:37:3c:d8:ea:48:29:42:d3:a7:e5:70:d8:d9:
62:c4:44:77:34:f9:d5:f8:b8:d9:3f:b0:c3:3b:6e:50:76:d3:
df:15:23:62:6e:57:81:33:da:1c:13:92:91:86:00:64:fc:67:
4c:de:f1:4a:4a:d0:b6:15:93:aa:9b:07:8f:06:47:41:1f:83:
23:98:ca:31:a5:5c:1c:a6:05:d6:98:13:6e:00:16:89:32:56:
c3:fa:d6:87:18:ec:df:66:b0:0f:0d:57:50:e2:a4:80:79:27:
98:b4:9a:16:8c:2d:8b:35:1f:3b:b6:59:1a:c6:fe:66:23:86:
53:0d:a9:c8:26:76:e8:9b:d7:95:26:fd:37:06:dc:82:5a:7f:
5c:2b:b5:ed:8b:b9:50:f2:11:3d:b8:42:86:95:d4:ba:35:9f:
d1:59:6a:a2:af:92:39:d6:32:53:98:fa:57:2f:b4:ab:8a:ff:
19:f1:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:52 2025 by rpki-client